[Samba] access "claim types"

Rowland Penny rpenny at samba.org
Fri Feb 10 08:10:33 UTC 2023



On 10/02/2023 06:50, Stefan G. Weichinger via samba wrote:
> 
> Samba 4.17.3 on Debian 11.6
> 
> [global]
> unix charset = iso8859-15
> 
> security = ads
> realm = COMP.INTRA
> workgroup = COMP
> 
> dedicated keytab file = /etc/krb5.keytab
> kerberos method = secrets and keytab
> 
> winbind cache time = 10
> winbind use default domain = yes
> winbind refresh tickets = Yes
> 
> template homedir = /mnt/MSA2040/smb/Homes/%D/%U
> 
> domain master = no
> local master = no
> preferred master = no
> 
> idmap config * : range = 3000-7999
> idmap config * : backend = tdb
> idmap config NORAS : range = 10000-20000
> idmap config NORAS : backend = rid
> 

Is this bad sanitisation ?
your workgroup is 'COMP' and the idmap config lines are using 'NORAS', 
they should be the same.

If that isn't it, try looking at dns, with things like this, it is 
usually dns.

Rowland



More information about the samba mailing list